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Abstract. Computing tight resource-level bounds is a fundamental problem in the con- 
struction of flexible plans with resource utilization. In this paper we describe an efficient 
algorithm that builds a resource envelope, the tightest possible such bound. The algorithm 
is based on transforming the temporal network of resource consuming and producing 
events into a flow network with nodes equal to the events and edges equal to the neces- 
sary predecessor links between events. A staged maximum flow problem on the network 
is then used to compute the time of occurrence and the height of each step of the resource 
envelope profile. Each stage has the same computational complexity of solving a maxi- 
mum flow problem on the entire flow network. This makes this method computationally 
feasible and promising for use in the inner loop of flexible-time scheduling algorithms. 


1 Resource Envelopes 

Retaining temporal flexibility in activity plans is important for dealing with execution uncer- 
tainty. For example, flexible plans allow explicit reasoning about the temporal uncontrollabil- 
ity of exogenous events [11] and the seamless incorporation of execution countermeasures. 
Fixed- time schedules (i.e., the assignment of a precise start and end time to all activities) are 
brittle and it is typically very difficult to exactly follow them during execution. For an example 
of the effect of fixed- time schedules in an intelligent execution situation, consider the “Sky lab 
strike” [6], when during the Skylab 4 mission, astronauts went on a sit-down strike after 45 
days of trying to catch up with the exact demands of a fast paced schedule with no flexibility 
for them to adjust to the space environment. 

A major obstacle to using flexible schedules, however, remains the difficulty of computing the 
amount of resources needed across all of their possible executions. This problem is particularly 
difficult for multiple-capacity resources (such as electrical power) that can be both consumed 
and produced in any amount by concurrent activities. Techniques have been developed [5] 
[10] for giving conservative estimates of the resource levels needed by a flexible schedule, 
yielding both an upper bound and a lower bound profile on the resource level over time. In the 
context of a systematic search method to build flexible plans, resource-level bounds can be 
used at each search step as follows: a) as a backtracking test, i.e., to determine when the 
lower/upper bound interval is outside of the range of allowed resource levels at some time and 
therefore no fixed-time instantiations of the plan is re source- feasible; and b) as a search termi- 
nation test, i.e., to determine when the lower/upper bound range is inside the range of allowed 
resource levels at all rimes and therefore all fixed-time instantiations of the plan are resource- 
feasible. 

Bound tightness is extremely important computationally since a tight bound can save a poten- 
tially exponential amount of search (through early backtracking and solution detection) when 
compared to a looser bound. In this paper, we discuss how to compute the resource-level enve- 
lope, i.e., the measure of maximum and minimum resource consumption at any time for all 
fixed- time schedules in the flexible plan. At each time the envelope guarantees that there are 


two fixed-time instantiations, one producing the minimum level and the other the maximum. 
Therefore, the resource-level envelope is the tightest possible resource-level bound for a flexi- 
ble plan since any ighter bound would exclude the contribution of at least one fixed- time 
schedule. If the resource-level envelope can be computed efficiently, it could substitute looser 
bounds that are currently used in the inner core of constraint-posting scheduling algorithms 
(Laborie 2001) with the potential for great improvements in performance. 

To appreciate the difficulty of computing the resource level, we can compare the cases of a 
fully flexible plan with that of a plan with a single fixed-time instantiation. In the fixed-time 
case, the envelope degenerates to the resource profile that is used in the inner loop of tradi- 
tional scheduling algorithms [2][ 15]. Computing from scratch a resource profile is cheap. It is 
easy to see that its worst cast time complexity is O (N lg N) where N is the number of activi- 
ties in the flexible plan. Consider now a fully flexible plan and assume that we naively wanted 
to compute the resource-level envelope for a flexible plan by simply enumerating all schedules 
and taking the maximum/minimum of all resource levels at all times. Since a flexible activity 
plan has a number o- possible instantiated fixed-time schedules that is exponential in the num- 
ber of events, such n iive method is clearly impractical in most cases. 

Note that “resource- evel envelope calculation” is not equivalent to “scheduling with multiple 
capacity”, an NP-hard problem. For example, note that a reduction of the envelope calculation 
to scheduling is not straightforward. Consider the interval between minimum and maximum 
envelope at a given time. It is true that a solution to the scheduling problem can be obtained in 
polynomial time if tl e envelope interval is always completely contained within resource avail- 
ability (in which cast all fixed-time instantiations are legal schedules). However, if at least two 
times the envelope interval is partly outside the availability bound, one can generate examples 
in which the envelope cannot tell us whether there is a fixed-time schedule that is within avail- 
ability at all times or whether for all schedules the resource level is outside availability at some 
time. Discriminating between these two cases still requires search. 

This paper presents a polynomial algorithm for the computation of resource-level envelopes 
based on a novel combination of the theory of shortest-paths in the temporal constraint net- 
work for the flexible plan, and the theory of maximum flows for a flow network derived from 
the temporal and resource constraints. We develop the theory, show that the algorithm is cor- 
rect, and that its asymptotic complexity is 0(N 0(maxflow(N))), where N is the number of 
start/end times of the activities in the plan, which is at most twice the number of activities, and 
0(maxflow(N)) is the complexity of a maximum flow algorithm applied to an auxiliary flow 
network with N nodes. We believe that this method will be efficient in practice, since experi- 
mental analysis [1] show the practical cost of maxflow to be as good as O (N 1,s ). However this 
paper is a theoretical contribution and a definitive answer to its practical complexity will re- 
quire further experimental work. 

In the rest of the paper we introduce some notation and describe the formal model of activity 
networks with resouice consumption. Then we review the literature on resource contention 
measures and show an example in which the current state of the art is inadequate. The discus- 
sion of our algorithm follows. Some informal examples to establish an intuitive understanding 
of our method are first given. Then we establish the connection between maximum flow prob- 
lems and finding sets of activities that have the optimal contribution to the resource level. 
These sets are then shown to compute an envelope. Finally, we describe a simple envelope 
algorithm and its complexity, and conclude discussing future work. 


2 Resource Envelopes 

Figure 1 shows an activity network with resource allocations. Our notation is equivalent to that 
of previous work on flexible scheduling with multiple-capacity resources [5] [10]. The network 
has two time variable ; per activity, a start event and an end event (e.g., ei s and ei e for activity 
Ai), a non-negative flexible activity duration link (e.g., [2, 5] for activity Aj), and flexible 



separation links between events (e.g., [0, 4] from e 3e to e^). A time origin, T s , corresponds to 
time 0 and supports reparation links to other events. Without loss of generality we assume that 
all events occur after T s and before an event T e rigidly connected to T s . The interval T s T e is 
the time horizon T of the network. 
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Figure 1: An activity network with resource allocations 

Time origin, events and links constitute a Simple Temporal Network (STN) [8]. Unlike regular 
STNs, however, each event has an associated allocation variable with real domain (e.g., r 3 i 
for event e^) representing the amount of resource allocated when the event occurs. We call 
this augmented network R a piece wise-constant Resource allocation STN (cR-STN). In the 
following we will assume that all allocations refer to a single, multi-capacity resource. The 
extension of the results to the case of multiple resources is straightforward. An event e~ with 
negative allocation is a consumer, while an e + with positive allocation is a producer . 

This formalization covers many of the usual models for resource allocations. For example, 
note that an event can be either a consumer or a producer in different instantiations of the 
allocation variables (e.g., event for which the bound for r 2 i is [-1, 3]). This allows reason- 
ing about dual-use activities (e.g., the activities of starting a car and running it make use of the 
alternator as either a power consumer or producer). Moreover, some events can have resource 
allocations that are opposite to each other (e.g., ei e vs. e ls ). This allows modeling allocations 
that last only during an activity's occurrence, such as power consumption. Note, however, that 
this model does not cover continuous accumulation such as change of energy stored in a bat- 
tery over time. A conservative approximation can be achieved by accounting for the entire 
resource usage at the activity start or end. 

We will always assume that the cR-STN is temporally consistent. From the STN theory [8], 
this means that the shortest-path problem associated with R has a solution. Given two events ej 
and e2 we denote with |eie 2 | the shortest-path from e! to e 2 . We will call a full instantiation of 
the time variables in R a schedule s(.) where s(e) is the time of occurrence of event e accord- 
ing to schedule s. The set S contains all possible consistent schedules for R. Each event e has a 
time bound [et(e), lt(e)], with et(e) and lt(e) respectively the earliest and latest time for e. The 
time bound represents the range of possible time values s(e) for all se S. From the STN the- 
ory, we know that et(ei = - |eT s | and lt(e) = |T s e|. Finally, given three events, ei, e 2 and e 3 , the 
triangular inequality among shortest paths |e!e 3 | < (ejeJ + |e 2 e 3 | holds. 

A fundamental data structure used in the rest of the paper is the anti-precedence graph, 
Aprec(R), for a cR-STN R. The anti -precedence graph is similar to the precedence graph of 
[10] with the following differences: a) the links are in reverse order; 2) it does not distinguish 
between the set of strict precedence edges, E<, and the set of precedence edges that allow time 
equality, E^; and 3) several possible kinds of precedence graphs are allowable for a network 
R. Formally, Aprec(R ! is a graph with the same events as R and such that for any two events 



e t and e 2 with |e L e 2 | < 0 there is a path from to e 2 in Aprec(R). Alternatively, we can say that 
an event e t precedes another e 2 in the anti-precedence graph if ej cannot be executed before e 2 . 
A way to build an and-precedence graph is to run an all-pairs shortest-path algorithm on R and 
retain only the edges with non-positive shortest distance. Smaller graphs can also be obtained 
by eliminating dominated edges. The choice of precedence graph type may affect performance 
but not the correctness of the algorithm described here. 

The cost of computing Aprec(R) is therefore bound by the cost of computing the all-pairs 
shortest path graph for R, i.e., it is 0(NE + N 2 lg V) where N is the number of events (at most 
twice the number of activities in the plan) and E is the number of temporal distance constraints 
in the original cR-STN [7]. 



Figure 2: Anti-precedence graph with time/resource usage 

Figure 2 depicts one of the anti-precedence graphs of the network in Figure 1 with the time 
bound and the maximum allowed resource allocation labeling each event. 


3 Resource Contention Measures 

Safe execution of a flexible activity networks needs to avoid resource contention, i.e., the 
possibility that for some consistent time assignment to the events there is at least one dme at 
which the total amount of resource allocated is outside the availability bounds. There are es- 
sentially two methods for estimating resource contention: heuristic and exact. Most of the 
heuristic techniques [14] [12] [3] measure the probability of an activity requesting a resource 
at a certain time. This probability is estimated either analytically on a relaxed constraint net- 
work or stochastically by sampling dme assignments on the full constraint network. The occur- 
rence probabilities are then combined in an aggregate demand on resources over time, the 
contention measure. Probabilistic contention can give a measure of likelihood of a conflict. 
However, it is not a safe measure, i.e., the lack of detected conflicts does not exclude that a 
variable instantiation tor the cR-STN could cause an inconsistent resource allocation. 

Exact methods avoid this problem. They compute sufficient conditions for the lack of conten- 
tion. [10] has a good survey of such methods. Current exact methods operate on relaxations of 
the constraint network. For example, edge-finding techniques [13] analyze how an activity can 
be scheduled relative to a subset of activities, comparing the sum of all durations with a time 
interval derived from the time bounds of all the activities under consideration. Relying solely 
on time bounds ignores much of the inter-activity constraints and is effective only when the 
time bounds are relatively tight. Therefore algorithms using these contention measures tend to 
eliminate much of the flexibility in the activity network. Some recent work [5] [10] goes fur- 
ther in exploiting inter-activity constraints. For example, [10] proposes a balance constraint 
that is based on conservative upper and lower bounds on the resource level immediately before 
and after each event e. These bounds precisely estimate the contribution of events that must 
precede e and overestimate the contribution of events that may or may not precede e. The 
over-estimate assumes that only the events with the worst contribution (producers for upper 
bounds and consumers for lower bounds) happen before e. The balance constraint appears to 




work well in a flexible scheduling algorithm [10] but the bounds on which it is based may be 
very loose for networks with significant amounts of parallelism. 
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Figure 3: Over-constraining a flexible activity network 

For example, consider the activity graph in Figure3, consisting of two rigid chains of n activi- 
ties with the same fixed duration and the same fixed activity separation. Assume that the hori- 
zon T is wide enough to allow any feasible ordering among them. Each activity consumes one 
unit during its occurrence and the resource has two available units of capacity over time. It is 
clear that the maxirniim resource level requested by the flexible plan at any time cannot exceed 
two, and therefore all schedules obtained by merging any schedule of the two chains are feasi- 
ble. A scheduling algorithm using a resource-level envelope will therefore recognize that the 
initial problem is already a feasible flexible plan and will terminate immediately. In contrast, a 
scheduler using the balance constraint will always detect an over-allocation until it somehow 
constrains the network (e.g., by systematic or local search) with constraints that are at least as 
tight as the two following cases: a) the start activity n of one chain occurs no later than the 
start of the second activity of the other; or b) more than two activities overlap and there is an 
activity k on one chain that must start between the end of activity i and the start of activity i+2 
on the other chain. The dashed arrows in Figure 3 represent the constraints posted in case b. 
The balance constraint cannot correctly handle this situation because it cannot account for the 
constraint structure of all possible parallel chains simultaneously. The rest of this paper shows 
that the full constraint structure can be efficiently exploited in calculating the resource- level 
envelope. 


4 Resource Envelopes 


As discussed in the introduction, we are seeking the maximum and minimum possible resource 
production (consumption) among all possible schedules of R. Note that the maximum (mini- 
mum) overall resource level induced by R for any possible schedule can always be obtained by 
assigning each allocation variable to its maximum (minimum) possible value. For any specific 
value assignment to the allocation variables, each event has a constant weight: positive, cfe*), 
for a producer and negative, - c(e“), for a consumer. Given a schedule seS and a time t e T, 
E s (t) is the set of events e such that s(e) < t. For any subset A of the set of events in R, E(R), 
we define the resource-level increment as A(A) = 0 if A = 0, and A(A) = E e +,e-€A c(e + ) - c(e”) 
if A * 0. The following functions of time rigorously define the resource-level envelope: 

• Resource level due to schedule s: L s (t) = A(E s (t)). 

• Maximum resource envelope : L max (t) = max^s (L s (t)). 

• Minimum resource envelope: L m j n (t) = min^s (L s (t)). 

The resource level envelope that we seek is the interval bound function of time [L^nCt), 
Lmax(t)]- Since the methods to compute and can be obtained from each other with 
obvious term substitutions, we only develop the algorithm for L^. 

Before we formally discuss our algorithm, we want to introduce some examples to give an 
intuitive feel of the foundations of the method. First consider an activity network consisting of 



a single activity thar produces or consumes resource capacity during its occurrence (Figure 
4(a)). We could build by asking at each time teT whether A x can happen before, after or 
can overlap t. If the activity starts with a resource production (Figure 4(b)), then the resource 
level will be maximum at t if Ai starts, contains or ends at t. This is always possible between 
et(e ls ) and lt(e le ). Within this interval Lnmxft) = 1, while outside L^O) = 0. Conversely, if Ai 
starts with a consumer (Figure 4(c)), then the maximum resource level can be zero at time t 
only if Ai can start after t or can end before t for some schedule. This is possible only before 
lt(ei s ) and after et(e le ). Therefore, = -1 between lt(ei s ) and et(e u ), and L^ft) = 0 

everywhere else. This example suggests a strategy for computing that looks at each event 
and considers the incremental contribution of the event’s weight to the maximum resource 
envelope at the earliest time for producers or at the latest time for consumers. 
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Figure 4: Maximum resource-level envelope for a single activity 
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Figure 5: Maximum level envelope for two chained activities 

For a complex netwoik, however, this simple strategy is insufficient. Consider a rigidly linked 
pair of activities with a reusable resource allocation (Figure 5(a)). In this case, the time of 
occurrence of and are bound together. Looking at the contribution to the envelope of 
each event in isolation, we would want to add the contribution of as late as possible since it 
is a consumer, and the contribution of ej s as early as possible, since it is a producer. The deci- 
sion of which time to choose depends on the total contribution of both events. The total contri- 
bution will be added at lt(e 2 *) if the total contribution is a consumption (Figure 5(b)) or at 
et(e 3 s) if the total contribution is a production (Figure 5(c)). Note that in both cases and 
are pending at the selected time, i.e., their contribution has not been added yet to the envelope 
but they both could occur at the selected time. This suggests revising the strategy for comput- 
ing Lmax as follows: at the earliest or latest time of each event, select the set of pending events 
whose resource-level increment is maximum, eliminate these events from the pending events 
and declare the increment for at that time to be their resource-level increment. 

Now consider the network in Figure 1 and the event time bounds, maximum resource alloca- 
tion and precedence graph in Figure 2. Assume that we want to compute L max (3). The set of 
events that may be scheduled before, at or after time 3 is {ej s , eu, € 35 , e 3e , e^}. However, of 
these only {eie, e 3s , e>, e 4s } are pending since the contribution to of e ls occurs at its earli- 
est time 1. The subse r of pending events that we need to consider at time 3 to compute the 


increment on are all those that are forced to occur at or before 3 assuming that some 
pending event occur at 3. These subsets are {e le }, {e^}, {e 3s , e 3e } and {e le , e 3s , e^, e*}. Unfor- 
tunately, each of these subsets has a negative weight and therefore none of them is selected at 
time 3 since, from f he definition of resource-level increment, the empty event set has the 
maximum (zero) increment. At time 4 the set of pending events is augmented with and a 
new subset of pending events with positive weight, {ei e , e*, e^, e*, e^}, is possible. This gen- 
erates the increment fhat, added to L max (3), gives us 

The selection of the pending events subset of maximum resource-level increment is the key 
source of complexity in calculating L^. An exhaustive enumeration of all subsets is intracta- 
ble in the general case. Fortunately, it turns out that this selection problem is equivalent to a 
maximum flow problem for an appropriate flow network derived from Aprec(R). We discuss 
this rigorously in the rest of the paper. 


5 Calculating Maximum Resource-Level Increments 

Consider an interval H^T. We can partition all events in R into three sets depending on their 
relative position with respect to H: 1) the closed events C H with all events that must occur 
strictly before or at the start of H, i.e., such that that It(e) < start(H); 2) the pending events R H 
with all events that can occur within or at the end of interval H, i.e., such that lt(e) > start(H) 
and et(e) < end(H); and 3) the open events O h with all events that must occur strictly after H, 
i.e., such that et(e) > end(H). 

The set R H could contain events that can be scheduled both inside and outside H. If H=T, then 
C T = 0, R t = E(R) and O h = 0. If H is a single instant of time, i.e., H=[t, t], we will use the 
simplifying notation C t =C[ ti R t =R[t, t] and O t =O ftj t j- 

Assume that we want to compute the resource-level increment for a schedule s at a time teH. 
This will always include the contribution of all events in C H and none of those in 0 H irrespec- 
tive of s and t. With respect to the events in R H> if an event is scheduled to occur at or before t, 
then all of its predecessors (according to Aprec(R)) will also have to occur at or before t. In 
other words, it is possible to find a set of events X e Rh such that the events e p eRH that are 
scheduled no later than t in s are those in X or those e p e Rh such that |e x e p | < 0 for some e x e 
X. We call this the predecessor set Px of X. Therefore, the resource level at time t for a given 
schedule s is the sum of the weights of events in Ch and in Px C Rh* Since we are trying to 
maximize the resource level, we will look for the sets Px with the maximum total weight. 

An important property/ that we will exploit later is that given two predecessor sets Px and Py, 
Px n Py and P x wPy are also predecessor sets. 


5.1 Resource-Level Increments and Maximum Flow 

We know that to corrpute we want to look for sets Px with maximum weight. We find 
these by computing x maximum flow for an auxiliary flow network built from R H and 
Aprec(R). For a complete discussion of maximum flow problems see [7]. Here we only high- 
light some concepts ard relations that we will use. 

First let us define the auxiliary flow problem that we will us to compute L,,**. 

Resource Increment Flow Problem: Given a set of pending events R H for a cR-STN R, we 
define the resource increment flow problem F(R H ) with source crand sink Tas follows : 

1. For each event e e Rh there is a corresponding node eeF(R H ). 

2. For each event e+ eRu, there is an edge <j—>e+ with capacity c(e*). 

3 . For each event e~ e Rh, there is an edge e~—>xwith capacity c(e~), i.e., the opposite of 
e~’s weight in R 

4. For each pair of e } and ei with an edge ej—^e 2 m the anti-precedence graph Aprec(R), 
there is a corresponding link e 1 —^e 2 in F(R H ) with capacity +<». 



Figure 6 shows the auxiliary flow problem for the anti-precedence graph in Figure 2, with 
every edge labeled v ith its capacity. 



Internal flow (precedence constraints) 
Incoming flow (producer events) 
Outgoing flow (consumer events) 


Figure 6: Resource increment flow problem 

Consistent with the theory of maximum flows, we will indicate f(ei, e 2 ) as the flow associated 
to a link e x — >e 2 in FlR H ). The flow function has, by definition, several properties. It is skew- 
symmetric, i.e., f(e 2 , ej) = - f(e b e 2 ). Each flow has to be not greater than the capacity of the 
link to which it is associated. For example, referring to the flow network in Figure 6, f(a, e>) 
< 2, while f(e 2 «, a) < 0 since there is no edge from and a, a situation equivalent to the ca- 
pacity of the edge e : — >o being zero. We also use the implicit summation notation f(A, B), 
where B and A are disjoint event sets in F(R H ), to indicate the flow f(A, B) = X aeA £t>€Bf(ai b). 
Consider now any subset of events A^Rh and let us call A c the set of events A c = R» - A. 
From the final property defining a flow function, flow conservation, we can obtain the follow- 
ing: f({a}, A) = f(A, {t}) + f(A, A c ). The total network flow is defined as f({a}, Rh) = f(Rm 
{t}). The maximum flow of a network is a flow function such that the total network flow is 
maximum. 

A fundamental concept in the theory of flows is the residual network . This is a graph with an 
edge for each pair of nodes in F(R H ) with positive residual capacity , i.e., the difference be- 
tween edge capacity and flow. Each edge in the residual network has capacity equal to the 
residual capacity. For example, considering the network in Figure 6, assume that f(e le , x) = 3 
and f(a, e 2 e) = 2. The residual network for that flow will have the following edges: ei t — »x with 
capacity 1, x^e !e with capacity 3, and e^^cr with capacity 2. Also note that any residual 
network for any flow of F(Rh) will always have an edge of infinite capacity for each edge in 
the precedence graph Aprec(R). An augmenting path is a path connecting <J to x in the resid- 
ual network. The existence of an augmenting path indicates that additional flow can be pushed 
from a to x. Alternatively, the lack of an augmenting path indicates that a flow is maximum. 

A resource-level increment A(A) for an event set A £ Rh is related to a flow in F(Rh) as fol- 
lows. We define the producer weight in A as c(A *) = Se+e a c(e*) and the consumer weight in 
A as c(A“) = 2e_ e A c(e~). We also define the producer residual in A for a flow f of F(R H ) as 
rCA*) = c(A*) - f({o}. A), i.e., the total residual capacity of the edges from a to A, and the 
consumer residual in A as r(A“) = c(A~) - f(A, {x}). 

Lemma 1: A(A) = r(A^) - r(A“) + f(A, A c ). 

Proof: A(A) = c(A+) - c(A“) = (c(A+) - f({a}, A)) - (c (A! - f ({a}, A)) = r(A+) - (c(A“) - 
f(A, {x}) - f(A, A c )) = KA+) - r(A~) + f(A, A c ).a 


We now focus on predecessor sets such as Px* 



Lemma 2: f(Px> P c \) <0. Moreover , f(Px> P* x)=0 if and only iff(e h e 2 )=0 for each e 1 e I* x 
and e 2 eP x- 

Proof: From the definition of predecessor set there is no edge e 2 — »ei in F(R H ) with eieP* x and 
e 2 eP x Therefore, f(e 2 , eO < 0 and f(P x , P c x ) < 0. The second condition can be demonstrated 
by observing that the sum of any number of non-positive numbers is 0 if and only if each num- 
ber is 0.D 

Corollary 1: A(P X ) £r<Px + ) -r(P x 1 • 

Proof: Immediate from Lemma 1 and Lemma 2. 


5.2 Maximum flows and maximum resource-level increments 

We can now find the maximum resource-level increment set P^ £ R H . Since P^ = 0 may 
be true, the maximum resource-level increment is always non-negative. The computation of the 
set uses a maximum flow f JQSlx of F(R H ). We indicate with r^CA) the producer/consumer re- 
sidual of A computec for The following fundamental theorem holds. 

Theorem 1: Given a partial plan R consider the (possibly empty) set Pmax of events that are 
reachable from the source ctin the residual network of somef max of F(R H ). P max is the prede- 
cessor set with maximum ^P^) > 0 . 

Proof: Assume that r^e*) = 0 for each e + e F(R H ). In this case no event is reachable from a 
in the residual network, thus P^ = 0 and A(P max ) = 0. From Corollary 1, for any predecessor 
set P x it is A(P X ) < -r^P x ~) < 0 = A(P max ) and therefore A(Pma X ) is maximum. 

Assume now r max (e > ) > 0 for some e + e F(R H ), in which case P^ is not empty. The following 
three properties hold. 

1. P max is a predecessor set. 

If not, there will be an event e 2 g P^ such that |eie 2 | < 0 for some event e^Pn**. From the 
definition of Aprec (R), however, we know that there must be a path in Aprec(R) from ei to 
e 2 . Since this path will be present in F(R H ) with all links having infinite capacity, the path 
will also always be present in any residual network for any flow. Therefore there is a path in 
the residual network going from a to ei (by definition of Pmax) and then to e 2 . Therefore, 
e 2 G Pmax> which is a contradiction. 

2 •r max (P max ~)=0. 

If not, there will be an event e e such that r max (e”) > 0. We can therefore build an 
augmenting path of F(R H ) as follows: 1) a path from a to e" with positive residual capacity 
which exists by definition of Pmaxi and 2) an edge e - — >t with positive residual capacity 
rmax(e”). The existence of the augmenting path means that is not a maximum flow, 
which is a contradiction. 

3 J^Pmax, P C nuJ=^ 

Since P^ is a predecessor set, from the proof of Lemma 2 we know that fma^Pmax? P* max) ^ 
0. If fmax(P max) P^.iax) < 0, then there is a pair of events eiG P^ and e 2 e P* such that 
fmaxtei, e 2 ) < 0. This means that the residual capacity from e! to e 2 is positive and therefore 
there is an edge ei -»e 2 in the residual network. But by definition of Pmax, this means that 
e 2 G Pmax> which is a contradiction. 

Applying the properties of P^ to Lemma 1, ACPmaJ = (Pmax*) - r rnax (P max “) + fmaxCPmax, 

P C max) = r.naxCP™/) > 0. 

To prove the maxima iity of P^*, observe from Corollary 1 that a non-empty predecessor set 
P x has A(P X ) > 0 only if r max (e + ) > 0 for some e + e P x - It is easy to see that P x is the set of 
events reachable in the residual graph from P x + £ Pma X + and that the properties at points 2 and 
3 above also hold for P x . Therefore, A (P x ) = iwCPx*) < iWP™**) = ACP^J, which proves 
the maximal ity of P^. □ 



The construction of P Diax discussed before does not guarantee its uniqueness since it depends 
on a specific maximum flow among potentially many for F(R H ). The following theorem 
proves, however, that is indeed unique for all maximum flows of F(R H ) and that it con- 
tains the minimum number of events among all predecessor sets with maximum positive re- 
source-level increment. 

Theorem 3: The predecessor set P max with maximum resource-level increment AiPmaf) and 
with minimum number of events is unique across all maximum flows of F(R N f 
Proof: Consider two maximum flows f^j and k among all maximum flows of F(R H ) and 
assume that they produce two distinct maximum resource-level increment predecessor sets, 
Pmax, j and P^ k . From the maximally of their increment, it must be AfPmaxjJ = AfPmaxj) = 
Amax- We can rewrite one maximum predecessor set as Pmaxj = Pjnk U P k _j where Pjnk= Pmaxj 
n PmaxA and P k _j= P :nax , k - Pmaxj- The hypothesis of distinction of Pmax, j and P^, k yields P k _j 
* 0 . 

First we observe that A(Pjnk) = Ama*. If not, AfPj-iJ > 0 and A(P k _j) >0. But this means that 
Pj uk = P^xj u Pmax k is a predecessor set such that A(Pjuk) > An**, which is a contradiction. 
Consider now P^ and let us call r/e) the residual r^e) computed in flow f^. Since 
A(P jnk ) = Amax, it must be r^e 4 ) = 0 if e + e Pj_ k . Also, rj(e") = 0 for each e" e Pmaxj- From 
Lemma 1, A(P j _ k ) - fmaxj(Pj-k, PVk) = 0. From Lemma 2 it follows that fmaxj(Pj-k5 Pjnk) = 0 
Hence, there cannot be a link in the residual network from an event in P jnk to one in Pj_ k . 
Therefore, e e Pj_ k is not reachable from a in the residual network and pj-* = 0. Since this is 
true for any pair <j, k>, P^ is unique. 

The same argument applied to P^* and P 0 £Pmax proves the minimality of P^, where P is a 
predecessor set such 'hat A(P 0 ) = Amax-D 


6 Building Resource Envelopes 

So far we know that the resource level for a schedule s at time t e H is equal to L s (t) = A(C H ) 
+ A(Px) for some predecessor set Px- However, it is not immediately obvious that the converse 
also applies. Given any predecessor set P x , we want to be able to determine a time t\ e H, the 
separation time , and a schedule s x > the separation schedule , such that all and only the events 
in ChuPx are scheduled at or before time t x . The existence of a separation schedule and a 
separation time is ne t obvious because of the upper-bound constraints in the STN, i.e., the 
metric links between events that do not contribute to the construction of Aprec(R). If some 
event occurs too early with respect to t x , an upper-bound constraint may force some event to 
occur before time t x even if it is not a successor in Aprec(R). We now show that indeed we 
can find a separation time and schedule for any P x and therefore also for P,™,*. For the latter, 
we show that t x is one of the times at which the resource level is maximum over H for any 
schedule. This yields the maximum resource envelope Lma* if H= [t, t] and we scan t over the 
horizon T. 


6.1 Latest events 

First we find the events in P x that will be scheduled at time t x . We say that e is a latest event 
of P x if it is not a stret predecessor of any other event in P x , i.e., for any e’ e P x , |e’ e| > 0. 
We will call P x ,iate the set of all latest events in P x . Also, we define P x>ea riy = Px - Pxjate- 

The following property holds between events in P x ,iate and P x , early- 

Property 1: Any event ej£ Px, early Is a strict predecessor of some event e 2 £ Px, uue> i 

Y*i\ < o. 



Proof: Since ei 6 Pv >ea riy? there must be an event en e P x such that |enei| < 0. If en e P x ,iate, 
the property is proven. Otherwise, we can find a finite chain of events e 2 — »ei k — >en— >ei 
with e 2 e P x , uue and |e 2 e lk | < 0, |eijeij.i| < 0 and (ene^ < 0, yielding |e 2 ei| < 0 for the triangular 
inequality of the shortest paths. If we could not find an e 2 e P x , late to start such a finite chain, 
the chain would have to become a cycle of events in P x , ea riy> which contradicts the temporal 
consistency of R.Q 


6.2 Separation Time for Latest Events 


We can construct a separation time t x at which we will schedule all latest events. 

Lemma 3: There is a time interval [t Xt mw» tx r maJ that intersects all time bounds 
[et(e), lt(e)] with e E Pxuue and such that start(H) <t Xrmax » 

Proof: There must be a time value in common among all time bounds in Palate* If not, there 
would be two events e b e 2 e P Xjlate such that et(ei) > lt(e 2 ) and, from the triangular inequality, 
|eie 2 | < - etfeO + ltl e 2 ) < 0, which is inconsistent with the definition of P X) iate* Observe that 
there must be an event e e P X j ate such that It(e) = t Xj max- If start(H) > t x , max? th en lt( e ) < 
start(H), which contradicts e e Rh*Q 

We define the separation time as t x = max (start(H), t Xtmin ), with t x = start(H) if P x =0. We 
can then show that each event in P c x can be scheduled after t x . 

Lemma 4: For any event e e P c & k( e ) > h 

Proof: By definition of R H it must be 11(e) > start(H). So we only need to consider the case in 
which t x = t x min > start(H). In this case there is at least one event ej e P x> iate such that et(ei) = 
t x ,min* For this event it is |ej e| < - et(e r ) + 11(e). Since e 6 P**, it must be that |ei e| > 0, other- 
wise e would follow n Apred(R) an event in P x . Therefore, 11(e) > et(ei) + |ei e| > et(ei) = t X( 


6.3 Separation schedule for predecessors 

We now build the separation schedule s x for P x and t x , i.e., a schedule such that s x (e) < t x for 
eeC H uP x and s x (e) > t x for eel^xuOx. Note that the following discussion holds also if 
P x =0 and t x = start(H). 

The following algorithm builds the separation schedule. 

1. Schedule all ee P Xt tote at t x , i.e., s x (e) = t x . 

2. Propagate time through R obtaining new time bounds [et’(e), lt’(e)] for each eeE(R). 

3. Schedule all ents e e E(R) - P X j ate at their new latest time, i.e., s x (e) = lt^ (e). 

For s x to be a schedule, it must be consistent with respect to R. We see that step 1 is consistent 
since: 1) t x belongs to the intersection of all latest event time bounds; and 2) since for any pair 
of latest events |eie 2 |>0, scheduling one at t x does not prevent any other latest events to be also 
scheduled at time t x . Step 3 above is also consistent because it is always possible to schedule 
all events at their latest times without temporal repropagation. 

Now we need to shov that the property defining a separation schedule is satisfied for s x . Note 
that we already know that it is satisfied for events in P x ,m te - By definition it is also satisfied for 
events in C H and O h * Therefore, we need to show that it is satisfied for P x , early an d P c x . 
a) lt’(e) < t x for all e e P x , early 

According to Property 1 we can pick an event ei6P Xi ute such that |ei e| < 0. From the trian- 
gular inequality we have IF(e) < lt’(ei) + |ei e| < lt’(ei) = t x . 



b) It y (e) > t x for all ee PV 

From Lemma 4 we know that before temporal repropagation it was lt(e) > t x . After it, either 
lt’(e)=lt(e), in which case the condition is satisfied, or lt*(e) has changed due to a propaga- 
tion that starts from some event ei e P x , i ate - So it must be lt’(e) = t x + |eie|. Since ee P° x , it 
must be |eie| > 0, otherwise e would follow in Apred(R) an event in P x . Hence, lt’(e) > t x . 

We can now compute the maximum resource level for any schedule within the inverval H. In 
the following, we indicate with Pmax(RH) the Pmax computed over F(R H ). 

Theorem 4: The maximum resource level for any schedule of R over an interval H^T is given 
by A (C H ) + A(P maJR H ))- 

Proof: We know that at any time te H the events in R H that are scheduled before t are a prede- 
cessor set P x . For 'he resource level at time t it is always A (Ch) + A(P x ) < A (C H ) + 
A(P ma x(RH)), the lat er being the resource level at the separation time t x for the separation 
schedule s x .Q 

There are two interesting special cases of Theorem 4. 

Corollary 2: The maximum possible resource consumption for R over T is equal to 
AfP max(R T )f 

This means that estimating the maximum possible resource consumption for a flexible plan 
over the entire time horizon has the same complexity as a maximum flow problem. 

Corollary 3: L^Jt) = AfCJ+AfP^Rt)). 

The last formula tells us how to compute the resource-level envelope at a specific time. We 
now need to find an efficient algorithm to compute the resource-level envelope over the entire 
horizon T. 


7 Efficient Computation of Resource Envelopes 

From Corollary 3, the naive approach to compute a resource-level envelope would be to iterate 
over all possible tel. However, we only need to compute Lmax at times when either C t or R ( 
changes. This can on y happen at et(e) or lt(e) for any eeE(R). Therefore we need to compute 
new levels for only 2N times, where N is the number of start/end events in the original 
activity network. For each such computation, we need to: a) compute PnaxCRt) by running a 
maximum flow on a network with at most N nodes; and 2) collect and sum the events in C t and 
Pmax(Rt)* The total complexity of the algorithm is therefore 0(N 0(maxflow(N)) + N 2 ), where 
0(maxflow(N)) is the complexity of finding a maximum flow with an arbitrary maximum flow 
algorithm. For modern algorithms using the “preflow push” method [9], the worst case com- 
plexity can be 0(N 3 ) Extensive empirical studies show that the practical complexity of varia- 
tions of the method can be as fast as 0(N 1S ) [1]. This suggests that resource-level envelopes 
could operate in the inner loop of scheduling search algorithms, especially if they can be com- 
putated incrementally 


8 Conclusions 

In this paper we describe an efficient algorithm to compute the tightest exact bound on the 
resource level induced by a flexible activity plan. This can potentially save exponential 



amounts of work wirh respect to currently available looser bounds. Future work will pursue 
two directions. The first is developing more incremental algorithms for the computation of the 
envelope. Using a temporal scanning of the events in the temporal network, it should be possi- 
ble to significantly reduce the size of the networks on which the maximum flow algorithm 
needs to be run. This could significantly speed up the envelope calculation. The second direc- 
tion will test the practical effectiveness of resource envelopes in the inner loop of search algo- 
rithms for multi-capacity resource scheduling, such as those used in (Laborie, 2001). This 
includes inner-loop backtracking and termination tests and variable and value ordering heuris- 
tics that exploit more directly the properties of the resource envelopes. 
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